Post #1887722

@swick For securely using path based APIs like the old mount syscall, passing "/proc/self/fd/NNN" paths is an option. While they look like symlinks from user space, they're treated specially by the kernel and will resolve to whatever the file descriptor points to race free. I've used that to do bind mounts between possibly hostile locations after resolving the paths similar to how you describe.